Update to jdk-17.0.4.0+1
Update release notes to 17.0.4.0+1
Switch to EA mode for 17.0.4 pre-release builds.
Print release file during build, which should now include a correct SOURCE value from .src-rev
Update tarball script with IcedTea GitHub URL and .src-rev generation
Include script to generate bug list for release notes
Update tzdata requirement to 2022a to match JDK-8283350
Move EA designator check to prep so failures can be caught earlier
Make EA designator check non-fatal while upstream is not maintaining it
Related: rhbz#2084218

Fix whitespace in spec file
Related: rhbz#2100677

Sequence spec file sections as they are run by rpmbuild (build, install then test)
Related: rhbz#2100677

Turn on system security properties as part of the build's install section
Move cacerts replacement to install section and retain original of this and tzdb.dat
Run tests on the installed image, rather than the build image
Introduce variables to refer to the static library installation directories
Use relative symlinks so they work within the image
Run debug symbols check during build stage, before the install strips them
Related: rhbz#2100677

RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
Resolves: rhbz#2102433

Update FIPS support to bring in latest changes
Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
Enable system security properties in the RPM (now disabled by default in the FIPS repo)
Improve security properties test to check both enabled and disabled behaviour
Run security properties test with property debugging on
Resolves: rhbz#2099844
Resolves: rhbz#2100677

Rebase FIPS patches from fips-17u branch and simplify by using a single patch from that repository
Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
RH2023467: Enable FIPS keys export
RH2094027: SunEC runtime permission for FIPS
Resolves: rhbz#2029657
Resolves: rhbz#2096117

April 2022 security update to jdk 17.0.3+6
Update to jdk-17.0.3.0+6 pre-release tarball (17usec.17.0.3+5-220408)
Add JDK-8284548 regression fix missing from pre-release tarball but in jdk-17.0.3+6/jdk-17.0.3-ga
Update release notes to 17.0.3.0+6
Add missing README.md and generate_source_tarball.sh
Switch to GA mode for release
JDK-8283911 patch no longer needed now we're GA...
Resolves: rhbz#2073579

Update to jdk-17.0.3.0+5
Update release notes to 17.0.3.0+5
Resolves: rhbz#2050460

Update to jdk-17.0.3.0+1
Update release notes to 17.0.3.0+1
Switch to EA mode for 17.0.3 pre-release builds.
Add JDK-8283911 to fix bad DEFAULT_PROMOTED_VERSION_PRE value
Related: rhbz#2050460

Enable AlgorithmParameters and AlgorithmParameterGenerator services in FIPS mode
Resolves: rhbz#2055383

Add rpminspect.yaml to turn off Java bytecode inspections
java-17-openjdk deliberately produces Java 17 bytecode, not the default Java 11 bytecode
Resolves: rhbz#2023540

Introduce tests/tests.yml, based on the one in java-11-openjdk
Resolves: rhbz#2058490

Storing and restoring alterntives during update manually
Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE
- The move of alternatives creation to posttrans to fix:
- Bug 1200302 - dnf reinstall breaks alternatives
- Had caused the alternatives to be removed, and then created again,
- instead of being added, and then removing the old, and thus persisting
- the selection in family
- Thus this fix, is storing the family of manually selected master, and if
- stored, then it is restoring the family of the master
Resolves: rhbz#2008206

Family extracted to globals
Related: rhbz#2008206

Detect NSS at runtime for FIPS detection
Turn off build-time NSS linking and go back to an explicit Requires on NSS
Resolves: rhbz#2052829